Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File:                     8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier:          YAEyfPWEx4NOx4ic6jW9t0r3vnNsnvaCX+XRfKDKriY=
Subject key identifier:   94:F8:39:78:03:D0:FC:BC:55:D1:B2:15:F1:17:30:07:5A:21:D2:51
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer:       /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial:       019848533886264B69BD43C18C9724BA49FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number:          0660
Signing time:             Sat 26 Jul 2025 20:01:10 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:10 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:10 +0000
Files and hashes:         1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: zhdgnjTbD8ivS/3w827mXzFWUrfWhsO4N64VgrlPtWQ=)
                          2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:38:86:26:4b:69:bd:43:c1:8c:97:24:ba:49:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
        Validity
            Not Before: Jul 26 20:01:10 2025 GMT
            Not After : Jul 27 20:01:10 2025 GMT
        Subject: CN=94f8397803d0fcbc55d1b215f11730075a21d251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:5c:c6:af:ff:fd:60:ad:2c:94:12:40:4f:
                    d8:a3:45:a8:59:7b:80:c1:1c:30:a8:52:bd:ed:f2:
                    55:e1:a6:f7:97:83:b3:95:26:5d:bf:d7:f9:d3:5f:
                    07:67:91:57:1e:21:e5:6b:bf:0b:0e:d0:ad:38:97:
                    37:92:93:e9:49:3e:23:75:b9:5d:de:2f:63:66:b7:
                    97:ad:66:7f:26:dc:69:fc:ae:4a:5c:fd:06:fc:0e:
                    d5:a9:a4:77:4c:23:78:e9:94:a8:62:91:6d:db:49:
                    d8:ab:b1:97:10:c3:90:2d:6f:49:cf:8d:12:97:09:
                    22:8f:f6:e7:a5:f9:e8:3e:af:48:7a:96:8e:47:14:
                    9d:20:6d:e2:33:1c:99:41:d1:69:60:ec:92:fa:ca:
                    cf:fe:1a:20:81:ed:54:bd:14:f9:c3:6d:f6:af:ba:
                    9e:72:f2:d5:65:09:14:e5:d2:71:99:01:33:11:02:
                    cc:1d:9f:6a:9e:95:65:44:ee:82:97:1b:ac:ec:a3:
                    d1:4d:e4:8a:92:29:51:b8:98:84:5e:0f:19:a2:fa:
                    1a:e5:45:7b:52:73:2d:7f:5f:8f:72:8e:3d:82:6b:
                    59:2e:eb:a0:cf:e0:21:0c:d8:18:8d:da:5c:26:9a:
                    21:da:86:3f:0b:91:a5:69:2c:2d:9f:d8:17:3c:aa:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:39:78:03:D0:FC:BC:55:D1:B2:15:F1:17:30:07:5A:21:D2:51
            X509v3 Authority Key Identifier:
                keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:23:ca:6a:c6:1b:30:fe:82:88:e0:a7:80:0e:2f:57:d7:d1:
         e9:d1:3b:3f:aa:c8:97:90:c4:db:55:56:33:8a:28:41:7f:2e:
         f1:0e:6d:b0:32:7b:6a:71:f4:31:49:c3:3e:d5:bd:cd:ae:5a:
         90:11:f1:ef:02:c5:af:28:f6:c9:4c:b1:05:9f:1c:0b:af:fe:
         06:95:bb:a5:72:c9:ea:66:25:0d:0e:9a:9c:52:ca:b6:88:4e:
         8a:2a:97:5b:6e:e9:e2:78:e8:50:5e:f7:72:c4:ef:91:cd:ef:
         ee:73:52:52:cb:e8:3c:6c:7a:dc:c6:87:87:b9:de:26:62:fb:
         ad:18:ad:96:e2:7a:b4:e7:41:e2:b3:b8:db:ab:ff:4e:47:07:
         ea:40:c0:80:41:9c:d3:dd:bd:aa:87:fc:aa:d8:f0:fb:b2:99:
         07:80:18:ed:9b:80:5f:90:85:03:ea:c2:6d:45:88:61:94:c1:
         c2:ac:03:30:0b:68:09:8a:e2:7e:96:81:26:78:59:52:84:f1:
         8e:db:90:53:c1:c4:3e:49:d7:41:ee:22:f6:bf:d0:2f:13:fb:
         0e:1f:7d:7c:a1:3c:a8:0b:75:42:56:b8:67:f3:81:ee:1d:1b:
         43:a6:42:15:f8:6a:84:0a:0e:0f:4b:97:dc:aa:14:ae:ae:92:
         ca:ef:25:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:31 2025 by rpki-client